[S-Off] Facepalm S-Off for HTC Devices - Droid DNA

Search This thread

GutterIsATool

Senior Member
Jun 23, 2010
82
5
Tulsa
Alright, I'll take the bullet and ask the nubbish question: will this wipe my data?

Just trying to figure out if I can do this before bed, or if I should wait until tomorrow.

Thanks again, guys. Great work!
 

Memnoch73

Senior Member
Mar 4, 2011
412
113
Thanks guys!!!! Worked great here. My DNA had SuperCID of 1111111 from following JCase's unlock in December. I was running Viper ROM w/ elkay's kernel.

Will be making some donations!!

Does beaups need a new phone? (I thought I read his got bricked during the creation of this s-off exploit?)

Hmm... Just for clarification. If we used the 1111111 supercid to unlock is my phone still like that or do I need to run the 222222 apk from the unlock thread?
 

minjiet

Senior Member
Jan 14, 2010
428
13
Re: [S-Off] Facepalm S-Off for HTC Devices One S, One XL, Droid DNA

if the phone already unlocked, does it mean already hav the cid?

Sent from my HTC6435LVW using xda premium
 
  • Like
Reactions: tfrank10

.torrented

Senior Member
Mar 7, 2011
2,789
1,484
32
www.cyanfox-rom.com
To fix my error 99 (where it should have said error 92) I just restored my nandroid from before I ran this process
But my backup CID is still VZW_001

Code:
C:\Users\Ryan\DNA S-OFF>fastboot oem rebootRUU
...
(bootloader) Start Verify: 3
OKAY [  0.045s]
finished. total time: 0.046s

C:\Users\Ryan\DNA S-OFF>fastboot flash zip PL8320000-DNA.zip
sending 'zip' (36905 KB)...
OKAY [  2.544s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
FAILED (remote: 92 supercid! please flush image again immediately)
finished. total time: 2.619s

C:\Users\Ryan\DNA S-OFF>fastboot oem boot
< waiting for device >
...
(bootloader) monarudo_vibrate_device_time(): vibrate 200(ms)...
(bootloader) Boot/Recovery signature checking...
(bootloader) TZ_HTC_SVC_HASH ret = 0
(bootloader) setup_tag addr=0x80600100 cmdline add=0x00315568
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:skuid 0x32401
(bootloader) TAG:hero panel = 0x94005B
(bootloader) TAG:engineerid = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) TAG: Gyro ID = 0x1
(bootloader) Device CID is super CID
(bootloader) CID is super CID
(bootloader) Backup CID is VZW__001
(bootloader) setting->cid::VZW__001
(bootloader) serial number: FA2BDS500315
(bootloader) commandline from head: console=ttyHSL0,115200,n8 androidboot
(bootloader) .hardware=dlx user_debug=31
(bootloader) command line length =803
(bootloader) active commandline: poweron_status=1 reset_status=0 board_mo
(bootloader) narudo.disable_uart3=0 diag.enabled=0 board_monarudo.debug_u
(bootloader) art=0 userdata_sel=0 androidboot.emmc=true androidboot.pages
(bootloader) ize=2048 skuid=0 ddt=20 ats=0  androidboot.lb=1 uif=?000 td.
(bootloader) sf=1 td.td=1 td.ofs=328 td.prd=1 td.dly=0 td.tmo=300 hlog.of
(bootloader) s=628 un.ofs=694 imc_online_log=0  androidboot.efuse_info=SF
(bootloader) SH androidboot.baseband=1.01.01.0110 androidboot.cid=VZW__00
(bootloader) 1 androidboot.devicerev=3 androidboot.batt_poweron=good_batt
(bootloader) ery androidboot.carr
(bootloader) aARM_Partion[0].name=misc
(bootloader) aARM_Partion[1].name=recovery
(bootloader) aARM_Partion[2].name=boot
(bootloader) aARM_Partion[3].name=system
(bootloader) aARM_Partion[4].name=local
(bootloader) aARM_Partion[5].name=cache
(bootloader) aARM_Partion[6].name=userdata
(bootloader) aARM_Partion[7].name=devlog
(bootloader) aARM_Partion[8].name=pdata
(bootloader) aARM_Partion[9].name=extra
(bootloader) aARM_Partion[A].name=radio
(bootloader) aARM_Partion[B].name=adsp
(bootloader) aARM_Partion[C].name=dsps
(bootloader) aARM_Partion[D].name=radio_config
(bootloader) aARM_Partion[E].name=modem_st1
(bootloader) aARM_Partion[F].name=modem_st2
(bootloader) aARM_Partion[10].name=cdma_record
(bootloader) aARM_Partion[11].name=reserve
(bootloader) partition number=18
(bootloader) Valid partition num=18
(bootloader) setting_get_bootmode() = 9
(bootloader) smem 8CF04000 (phy 8CF04000): TZ_HTC_SVC_UPDATE_SMEM ret = 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) Start Verify: 3
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) TZ_HTC_SVC_DISABLE ret = 205643776 (0xC41E000)
(bootloader) Start Verify: 3
(bootloader) jump_to_kernel: machine_id(4060), tags_addr(0x80600100), ker
(bootloader) nel_addr(0x80608000)
(bootloader) -------------------hboot boot time:4992 msec
FAILED (status read failed (Too many links))
finished. total time: 2.892s

C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
error: device not found

C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
error: device not found

C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
error: device not found

C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
error: device not found

C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
1854 KB/s (9496 bytes in 0.005s)

C:\Users\Ryan\DNA S-OFF>adb shell chmod 744 /data/local/tmp/soffbin3

C:\Users\Ryan\DNA S-OFF>adb shell su -c "/data/local/tmp/soffbin3"

C:\Users\Ryan\DNA S-OFF>adb shell su -c "/data/local/tmp/soffbin3"

C:\Users\Ryan\DNA S-OFF>adb reboot bootloader

C:\Users\Ryan\DNA S-OFF>
 

docnok63

Senior Member
Nov 22, 2012
2,176
2,581
Memphis, TN
https://www.youtube.com/watch?v=b0vhGEGJC8g

Okay guys and girls, this is the time to open up your virtual wallets and DONATE. I don't care if it's a dollar (but really, for what this does for something you use every day, SHOULDN'T it be more???) Send these folks some cash. I LITERALLY had to talk beaups into creating an email account for his Paypal today. That's how humble he is. He's going to use donation money to get himself an M7 so he can s-off that too (thus the new gmail account name.)

This opens the doors wide open for our device and you should show these devs some monetary love and not just profit from their work. 'Nuff said...except...

THANK YOU GENTLEMEN!!! :good: :highfive: :D
 

Attachments

  • donation.jpg
    donation.jpg
    80.1 KB · Views: 589

docnok63

Senior Member
Nov 22, 2012
2,176
2,581
Memphis, TN
Alright, I'll take the bullet and ask the nubbish question: will this wipe my data?

Just trying to figure out if I can do this before bed, or if I should wait until tomorrow.

Thanks again, guys. Great work!

No, it doesn't touch a bit of your data. It literally takes about 10-15 minutes.

--------------------

Speaking of data, when I booted back into Android the first time from checking s-off in bootloader, my radios were turned off. I'm not sure if this is because I had the new 2.04 radios or not. I went into settings and they said they were on when they weren't. I toggled them off, then back on. All has been good ever since, even with reboots.
 

MsEvyLynch

Senior Member
Jan 25, 2013
239
121
Wow I'm exceptionally terrible with computers but this was very easy indeed. Is something I can flash to get the new DNA firmware stuff or what ever it's called. I like being update to date on my things but no rush.
 
  • Like
Reactions: robertmoore208

wpsantennas

Senior Member
Nov 30, 2006
181
12
www.wpsantennas.com
Gentlemen,

One thing i noticed is i too got the "device not found" try doing an "adb devices". Mine didn't show. I disabled and re-enabled debugging, all is good now. S-Off, woot! Now i can actually flash the new radios w/o having to RUU.

I got the "device not found" as well (which started popping up before doing this process.) Once the phone is fully booted I couldn't get adb to connect no matter what. So, I used "regular" methods to copy soffbin3 to the phone and then used terminal on the phone to copy it to /data/local/tmp/ as well as complete the last two commands. Worked.
 

jasoraso

Senior Member
May 24, 2007
581
177
Salt Lake City, UT
Gentlemen,

One thing i noticed is i too got the "device not found" try doing an "adb devices". Mine didn't show. I disabled and re-enabled debugging, all is good now. S-Off, woot! Now i can actually flash the new radios w/o having to RUU.

Yeah, after the reboot, I had to unplug/re-plug my usb cable to get adb to recognize the device - maybe its a Windows thing?
 

buildable

Senior Member
Feb 14, 2013
50
16
hmm....
I get all the way here, and then it hangs on the white HTC screen, refusing to go any further.
Of course, at this point adb can't see the device anymore
Have to force the device off and reboot again to get the phone back up.
I must be doing something off, but what?

Code:
c:\adb>fastboot oem boot
< waiting for device >
...
(bootloader) monarudo_vibrate_device_time(): vibrate 200(ms)...
(bootloader) Boot/Recovery signature checking...
(bootloader) TZ_HTC_SVC_HASH ret = 0
(bootloader) setup_tag addr=0x80600100 cmdline add=0x003147C8
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:skuid 0x32401
(bootloader) TAG:hero panel = 0x94005B
(bootloader) TAG:engineerid = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) TAG: Gyro ID = 0x1
(bootloader) [SD_ERR] The project does not support SD card
(bootloader) E0902910 E0902E20
FAILED (status read failed (No such file or directory))
finished. total time: 1.117s

c:\adb>
 

jinx01

Senior Member
Dec 25, 2007
120
21
Help! I am on the last three commands and am stuck!

If I don't include the ".zip" in the commands for soffbin3, adb won't push the file or otherwise function.

SO

I included the .zip...
ie: adb push soffbin3.zip /data/local/tmp/
adb shell chmod 744 /data/local/tmp/soffbin3.zip
adb shell su -c "/data/local/tmp/soffbin3.zip"

BUT

on the last command I receive this error:
D:\andy>adb shell su -c "/data/local/tmp/soffbin3.zip"
/data/local/tmp/soffbin3.zip[3]: syntax error: '(' unexpected

Any ideas? Anyone?
 

ImagioX1

Senior Member
Sep 18, 2012
2,027
3,379
Can someone help me? I ran the getmodel id and got PJ8310000 which doesn't match any of the zips for download. What do I do now? I have the att one xl.
 
Last edited:
Jul 28, 2010
46
6
Nashville, TN
Help! I am on the last three commands and am stuck!

If I don't include the ".zip" in the commands for soffbin3, adb won't push the file or otherwise function.

SO

I included the .zip...
ie: adb push soffbin3.zip /data/local/tmp/
adb shell chmod 744 /data/local/tmp/soffbin3.zip
adb shell su -c "/data/local/tmp/soffbin3.zip"

BUT

on the last command I receive this error:
D:\andy>adb shell su -c "/data/local/tmp/soffbin3.zip"
/data/local/tmp/soffbin3.zip[3]: syntax error: '(' unexpected

Any ideas? Anyone?

the contents of the soffbin zip should be unzipped to where adb.exe is (platform-tools most likely), therefore you won't be typing in .zip, hence why its also not recognizing it. the zip that gets pushed to is the appropriate model id zip ie onexl, dna.....
 

jinx01

Senior Member
Dec 25, 2007
120
21
the contents of the soffbin zip should be unzipped to where adb.exe is (platform-tools most likely), therefore you won't be typing in .zip, hence why its also not recognizing it. the zip that gets pushed to is the appropriate model id zip ie onexl, dna.....

thanks. so damn excited i didn't unzip the soffbin3.zip. works and done!
 

jasoraso

Senior Member
May 24, 2007
581
177
Salt Lake City, UT
you forgot to unzip soffbin3.zip! (see step 1) Make sure it is unzipped in the directory where your adb is

Help! I am on the last three commands and am stuck!

If I don't include the ".zip" in the commands for soffbin3, adb won't push the file or otherwise function.

SO

I included the .zip...
ie: adb push soffbin3.zip /data/local/tmp/
adb shell chmod 744 /data/local/tmp/soffbin3.zip
adb shell su -c "/data/local/tmp/soffbin3.zip"

BUT

on the last command I receive this error:
D:\andy>adb shell su -c "/data/local/tmp/soffbin3.zip"
/data/local/tmp/soffbin3.zip[3]: syntax error: '(' unexpected

Any ideas? Anyone?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 358
    Welcome to Facepalm S-Off for the HTC Droid DNA

    Credits and terms:


    Exploit by beaups, full guide, testing, and concept by jcase and beaups. Thanks to dsb9938 and dr_drache for support and testing. Thanks also to all of the regulars at teamandirc. Thanks to jcase for recently modifiying the process to make it even easier and more reliable.

    Both beaups and jcase will collect the applicable active bounties. Further donations are greatly appreciated and can be sent to:

    beaups - Donate to beaups
    jcase - Donate to jcase
    dsb9938 - Donate to dsb9938
    dr_drache - Donate to dr_drache

    You can also come by irc for support or just to say thanks: #FacePalm http://chat.andirc.net:8080/?channels=facepalm

    While this process shouldn’t be too risky, bricks can happen. None of us will be accountable. If you are worried, don’t do it.

    This is a pretty simple method, however, you will need to have a working adb and fastboot environment. This method will work on any operating system that supports adb and fastboot. You should understand how to use a terminal window in your O/S. If you don’t understand adb and fastboot, you probably don’t need S-off.

    Lastly, the work herein should not be stolen, repackaged, one clicked, bat’d, etc. The binary contained in DNA-rescue.img is not GPL and may not be reused, integrated into other work, reposted, or redistributed without our permission. The kernel portion of DNA-rescue.img is derived from unmodified HTC source. That source code can be obtained from htcdev.

    For this to work, you must be HTCdev unlocked and have superCID (custom recovery/root is optional), see the thread below for help and information regarding obtaining superCID, unlock, etc. If you have taken the OTA for the DNA (sw version 2.xx) without FIRST obtaining superCID, there is no superCID nor s-off method for you currently. Note this thread is provided for convenience only. Please look for support for superCID/unlock in it's proper thread, do NOT clutter this thread with support requests regarding obtaining superCID and/or unlock! If you try this process without superCID, it will not work, and you may have issues:

    SuperCID for HTC Droid DNA:
    http://xdaforums.com/showthread.php?t=2109862

    Download modified boot.img:
    http://d-h.st/pQy

    Download signed firmware:
    http://d-h.st/nOo 8fa1cf193559d34279d2b1c1aa8c29

    1)
    Code:
    adb reboot bootloader

    2)
    Code:
    fastboot oem rebootRUU
    (wait for black HTC Screen)

    3)
    Code:
    fastboot flash zip PL8320000-DNA.zip
    After a while, You should see the following error “FAILED (remote: 92 supercid! please flush image again immediately)

    4) Immediately issue the following command:
    Code:
    fastboot boot DNA-rescue.img

    5) After android is FULLY booted
    Code:
    adb reboot bootloader

    6) You should see what you are looking for!

    If you need help or just care to say thanks, join us on IRC: #FacePalm http://chat.andirc.net:8080/?channels=facepalm

    Enjoy.


    Getting an error 99 instead of error 92 after step 3?


    Perform a few FULL power-downs and boots. Also, others have reported clearing caches in recovery helps as well.
    13
    rainabba,

    This is not an OPEN DEVELOPMENT community, this is a public development community. We made decisions not to obfuscate what is going on, so the community could learn, but choose to keep the rights and source to the project. It is free for personal use, but not opensource and not free to distribute.

    Hell I remember you flipping out over someone distributing a GPL licensed binary you compiled, you have no room to talk here.

    You like to cause problems with any AndIRC related project (time and time again), you have issues with us it is very clear, but I'm going to ask you nicely to just go away. If you don't like how we handle our projects, go create your own instead of complaining.
    :cool:

    Every instance so far where someone has had this issue AND succeeded seems to require AT LEAST wiping data, but sometimes as much as an RUU flash to stock, and at worst, a complete RUU, re-lock, and start from scratch as if the phone was fresh out of the box.

    ---------- Post added at 03:43 PM ---------- Previous post was at 03:40 PM ----------



    Why do you people keep insisting this? Because the OP "demanded" that nobody do it? That won't hold water and so far I can't see any reason a one-click can't be made. It might not be safe and since only the noobs would "need" it, it's likely a bad idea, but there are those like myself who will often create such scripts because they end up being useful for any number of reasons and I'll be damned if someone things that in an OPEN DEVELOPMENT community, that something like a SCRIPT won't be released because someone said so.

    Your reply to this person is offensive on so many levels. You could at least take time to explain yourself (or link to such an explanation).
    11
    YAY!!!!!!!!!!!!


    D

    .
    8
    Now that you guys have S-OFF, you can use my RegawMOD Bootloader Customizer!
    Just have someone make a plugin for the HTC One <insert model here> and then customize away!

    http://xdaforums.com/showthread.php?t=1786498
    8
    ATTN: If you are on a DNA, PLEASE WAIT BEFORE ATTEMPTING!!

    Something is not right, the method is not working regardless of if you took the OTA or not.
    Beanups will need to look into this.

    It does work, just because you didn't get it working doesnt mean it doesnt work, please edit you post